Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-7k2s-fmzx-a3d8
Summary
Multiple vulnerabilities have been found in Ceph, the worst of
    which could result in privilege escalation.
Aliases
0
alias CVE-2020-25678
Fixed_packages
0
url pkg:deb/debian/ceph@14.2.18-1?distro=trixie
purl pkg:deb/debian/ceph@14.2.18-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@14.2.18-1%3Fdistro=trixie
1
url pkg:deb/debian/ceph@14.2.21-1
purl pkg:deb/debian/ceph@14.2.21-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1yz5-m9s7-nqdm
2
vulnerability VCID-47cr-h639-tqd4
3
vulnerability VCID-54nw-yq6d-2ueu
4
vulnerability VCID-5bgn-2pbq-6yd1
5
vulnerability VCID-nczx-qfyh-xubz
6
vulnerability VCID-r1ah-c6z7-vyen
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@14.2.21-1
2
url pkg:deb/debian/ceph@14.2.21-1?distro=trixie
purl pkg:deb/debian/ceph@14.2.21-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@14.2.21-1%3Fdistro=trixie
3
url pkg:deb/debian/ceph@16.2.15%2Bds-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ceph@16.2.15%2Bds-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1yz5-m9s7-nqdm
2
vulnerability VCID-r1ah-c6z7-vyen
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@16.2.15%252Bds-0%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/ceph@18.2.7%2Bds-1?distro=trixie
purl pkg:deb/debian/ceph@18.2.7%2Bds-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1yz5-m9s7-nqdm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@18.2.7%252Bds-1%3Fdistro=trixie
5
url pkg:deb/debian/ceph@18.2.8%2Bds-1?distro=trixie
purl pkg:deb/debian/ceph@18.2.8%2Bds-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@18.2.8%252Bds-1%3Fdistro=trixie
6
url pkg:ebuild/sys-cluster/ceph@14.2.21
purl pkg:ebuild/sys-cluster/ceph@14.2.21
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/sys-cluster/ceph@14.2.21
Affected_packages
0
url pkg:deb/debian/ceph@0.80.7-1~bpo70%2B1
purl pkg:deb/debian/ceph@0.80.7-1~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-bysx-t7fz-5kdk
16
vulnerability VCID-cm58-jgsb-7yaf
17
vulnerability VCID-d8ft-cst1-5yh5
18
vulnerability VCID-fy1p-qh8k-m7b8
19
vulnerability VCID-gj55-s7r1-f3b4
20
vulnerability VCID-gjne-rqt9-jqc5
21
vulnerability VCID-hqp5-p9fs-t3dk
22
vulnerability VCID-kxvn-yjm8-3ygt
23
vulnerability VCID-m5wq-1w2k-9khk
24
vulnerability VCID-nczx-qfyh-xubz
25
vulnerability VCID-pp2v-1dp5-4bbd
26
vulnerability VCID-qkp7-s947-ufcu
27
vulnerability VCID-qr8p-ec3h-37at
28
vulnerability VCID-r1ah-c6z7-vyen
29
vulnerability VCID-rukb-cwpx-q3hy
30
vulnerability VCID-ss2f-8hxs-myb1
31
vulnerability VCID-ssk3-kfn8-vuhy
32
vulnerability VCID-xsvh-emr7-r7as
33
vulnerability VCID-yr1z-udw9-mfha
34
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.7-1~bpo70%252B1
1
url pkg:deb/debian/ceph@0.80.7-2
purl pkg:deb/debian/ceph@0.80.7-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-bysx-t7fz-5kdk
16
vulnerability VCID-cm58-jgsb-7yaf
17
vulnerability VCID-d8ft-cst1-5yh5
18
vulnerability VCID-fy1p-qh8k-m7b8
19
vulnerability VCID-gj55-s7r1-f3b4
20
vulnerability VCID-gjne-rqt9-jqc5
21
vulnerability VCID-hqp5-p9fs-t3dk
22
vulnerability VCID-kxvn-yjm8-3ygt
23
vulnerability VCID-m5wq-1w2k-9khk
24
vulnerability VCID-nczx-qfyh-xubz
25
vulnerability VCID-pp2v-1dp5-4bbd
26
vulnerability VCID-qkp7-s947-ufcu
27
vulnerability VCID-qr8p-ec3h-37at
28
vulnerability VCID-r1ah-c6z7-vyen
29
vulnerability VCID-rukb-cwpx-q3hy
30
vulnerability VCID-ss2f-8hxs-myb1
31
vulnerability VCID-ssk3-kfn8-vuhy
32
vulnerability VCID-xsvh-emr7-r7as
33
vulnerability VCID-yr1z-udw9-mfha
34
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.7-2
2
url pkg:deb/debian/ceph@0.80.7-2%2Bdeb8u2
purl pkg:deb/debian/ceph@0.80.7-2%2Bdeb8u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-bysx-t7fz-5kdk
16
vulnerability VCID-cm58-jgsb-7yaf
17
vulnerability VCID-d8ft-cst1-5yh5
18
vulnerability VCID-fy1p-qh8k-m7b8
19
vulnerability VCID-gj55-s7r1-f3b4
20
vulnerability VCID-gjne-rqt9-jqc5
21
vulnerability VCID-hqp5-p9fs-t3dk
22
vulnerability VCID-kxvn-yjm8-3ygt
23
vulnerability VCID-m5wq-1w2k-9khk
24
vulnerability VCID-nczx-qfyh-xubz
25
vulnerability VCID-pp2v-1dp5-4bbd
26
vulnerability VCID-qkp7-s947-ufcu
27
vulnerability VCID-qr8p-ec3h-37at
28
vulnerability VCID-r1ah-c6z7-vyen
29
vulnerability VCID-rukb-cwpx-q3hy
30
vulnerability VCID-ss2f-8hxs-myb1
31
vulnerability VCID-ssk3-kfn8-vuhy
32
vulnerability VCID-xsvh-emr7-r7as
33
vulnerability VCID-yr1z-udw9-mfha
34
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.7-2%252Bdeb8u2
3
url pkg:deb/debian/ceph@0.80.10-2~bpo8%2B1
purl pkg:deb/debian/ceph@0.80.10-2~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-cm58-jgsb-7yaf
16
vulnerability VCID-d8ft-cst1-5yh5
17
vulnerability VCID-fy1p-qh8k-m7b8
18
vulnerability VCID-gj55-s7r1-f3b4
19
vulnerability VCID-gjne-rqt9-jqc5
20
vulnerability VCID-hqp5-p9fs-t3dk
21
vulnerability VCID-kxvn-yjm8-3ygt
22
vulnerability VCID-m5wq-1w2k-9khk
23
vulnerability VCID-nczx-qfyh-xubz
24
vulnerability VCID-pp2v-1dp5-4bbd
25
vulnerability VCID-qkp7-s947-ufcu
26
vulnerability VCID-qr8p-ec3h-37at
27
vulnerability VCID-r1ah-c6z7-vyen
28
vulnerability VCID-rukb-cwpx-q3hy
29
vulnerability VCID-ss2f-8hxs-myb1
30
vulnerability VCID-ssk3-kfn8-vuhy
31
vulnerability VCID-xsvh-emr7-r7as
32
vulnerability VCID-yr1z-udw9-mfha
33
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.10-2~bpo8%252B1
4
url pkg:deb/debian/ceph@10.2.5-6~bpo8%2B1
purl pkg:deb/debian/ceph@10.2.5-6~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-d8ft-cst1-5yh5
16
vulnerability VCID-fy1p-qh8k-m7b8
17
vulnerability VCID-gjne-rqt9-jqc5
18
vulnerability VCID-hqp5-p9fs-t3dk
19
vulnerability VCID-kxvn-yjm8-3ygt
20
vulnerability VCID-m5wq-1w2k-9khk
21
vulnerability VCID-nczx-qfyh-xubz
22
vulnerability VCID-pp2v-1dp5-4bbd
23
vulnerability VCID-qkp7-s947-ufcu
24
vulnerability VCID-r1ah-c6z7-vyen
25
vulnerability VCID-rukb-cwpx-q3hy
26
vulnerability VCID-ssk3-kfn8-vuhy
27
vulnerability VCID-xsvh-emr7-r7as
28
vulnerability VCID-yr1z-udw9-mfha
29
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@10.2.5-6~bpo8%252B1
5
url pkg:deb/debian/ceph@10.2.11-2
purl pkg:deb/debian/ceph@10.2.11-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-d8ft-cst1-5yh5
16
vulnerability VCID-fy1p-qh8k-m7b8
17
vulnerability VCID-gjne-rqt9-jqc5
18
vulnerability VCID-kxvn-yjm8-3ygt
19
vulnerability VCID-m5wq-1w2k-9khk
20
vulnerability VCID-nczx-qfyh-xubz
21
vulnerability VCID-pp2v-1dp5-4bbd
22
vulnerability VCID-qkp7-s947-ufcu
23
vulnerability VCID-r1ah-c6z7-vyen
24
vulnerability VCID-rukb-cwpx-q3hy
25
vulnerability VCID-ssk3-kfn8-vuhy
26
vulnerability VCID-xsvh-emr7-r7as
27
vulnerability VCID-yr1z-udw9-mfha
28
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@10.2.11-2
6
url pkg:deb/debian/ceph@12.2.11%2Bdfsg1-2.1
purl pkg:deb/debian/ceph@12.2.11%2Bdfsg1-2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-gjne-rqt9-jqc5
14
vulnerability VCID-kxvn-yjm8-3ygt
15
vulnerability VCID-m5wq-1w2k-9khk
16
vulnerability VCID-nczx-qfyh-xubz
17
vulnerability VCID-pp2v-1dp5-4bbd
18
vulnerability VCID-qkp7-s947-ufcu
19
vulnerability VCID-r1ah-c6z7-vyen
20
vulnerability VCID-rukb-cwpx-q3hy
21
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@12.2.11%252Bdfsg1-2.1
7
url pkg:rpm/redhat/ceph@2:14.2.11-147?arch=el7cp
purl pkg:rpm/redhat/ceph@2:14.2.11-147?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45eq-pv3j-2uh9
1
vulnerability VCID-7k2s-fmzx-a3d8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ceph@2:14.2.11-147%3Farch=el7cp
8
url pkg:rpm/redhat/ceph-ansible@4.0.49.2-1?arch=el7cp
purl pkg:rpm/redhat/ceph-ansible@4.0.49.2-1?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45eq-pv3j-2uh9
1
vulnerability VCID-7k2s-fmzx-a3d8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ceph-ansible@4.0.49.2-1%3Farch=el7cp
9
url pkg:rpm/redhat/gperftools@2.6.3-3?arch=el8cp
purl pkg:rpm/redhat/gperftools@2.6.3-3?arch=el8cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45eq-pv3j-2uh9
1
vulnerability VCID-7k2s-fmzx-a3d8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gperftools@2.6.3-3%3Farch=el8cp
10
url pkg:rpm/redhat/tcmu-runner@1.5.2-3?arch=el8cp
purl pkg:rpm/redhat/tcmu-runner@1.5.2-3?arch=el8cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7k2s-fmzx-a3d8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tcmu-runner@1.5.2-3%3Farch=el8cp
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25678.json
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25678.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25678
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.02843
published_at 2026-04-01T12:55:00Z
1
value 0.00015
scoring_system epss
scoring_elements 0.02909
published_at 2026-04-02T12:55:00Z
2
value 0.00015
scoring_system epss
scoring_elements 0.02924
published_at 2026-04-04T12:55:00Z
3
value 0.00015
scoring_system epss
scoring_elements 0.02931
published_at 2026-04-07T12:55:00Z
4
value 0.00015
scoring_system epss
scoring_elements 0.02933
published_at 2026-04-08T12:55:00Z
5
value 0.00015
scoring_system epss
scoring_elements 0.02958
published_at 2026-04-09T12:55:00Z
6
value 0.00015
scoring_system epss
scoring_elements 0.02928
published_at 2026-04-11T12:55:00Z
7
value 0.00015
scoring_system epss
scoring_elements 0.02908
published_at 2026-04-12T12:55:00Z
8
value 0.00015
scoring_system epss
scoring_elements 0.02901
published_at 2026-04-13T12:55:00Z
9
value 0.00019
scoring_system epss
scoring_elements 0.04957
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25678
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25678
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25678
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1892109
reference_id 1892109
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1892109
4
reference_url https://security.gentoo.org/glsa/202105-39
reference_id GLSA-202105-39
reference_type
scores
url https://security.gentoo.org/glsa/202105-39
5
reference_url https://access.redhat.com/errata/RHSA-2021:1452
reference_id RHSA-2021:1452
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1452
6
reference_url https://usn.ubuntu.com/4998-1/
reference_id USN-4998-1
reference_type
scores
url https://usn.ubuntu.com/4998-1/
Weaknesses
0
cwe_id 312
name Cleartext Storage of Sensitive Information
description The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Exploits
Severity_range_score4.4 - 4.4
Exploitability0.5
Weighted_severity4.0
Risk_score2.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-7k2s-fmzx-a3d8